$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.cer File: 4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.cer (raw, json) Hash identifier: dQo5D4aYbJ12HFAg8IL0LaD2BAqp/PyfjukiLtW60kI= Subject key identifier: 4A:6B:B4:ED:DC:C3:1D:B4:7C:BF:19:92:CA:C2:C3:29:DA:0F:34:8F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 33D68FEEE08FBD6CD649D8B4B7761C883FE4A858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/bd18dcaf-26ef-4c91-82f0-5ddefc58980c/0/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.mft caRepository: rsync://rpki-rsync.idnic.net/repo/bd18dcaf-26ef-4c91-82f0-5ddefc58980c/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Thu 29 Oct 2026 08:02:30 +0000 Certificate not after: Thu 28 Oct 2027 08:07:30 +0000 Subordinate resources: AS: 155059 IP: 27.98.192.0/23 IP: 2001:df7:c540::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d6:8f:ee:e0:8f:bd:6c:d6:49:d8:b4:b7:76:1c:88:3f:e4:a8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 29 08:02:30 2026 GMT Not After : Oct 28 08:07:30 2027 GMT Subject: CN=4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:94:3e:dc:21:b6:35:b5:ba:46:44:54:19: d7:71:24:0a:4f:ce:0a:2e:e7:33:af:44:77:a6:84: c7:e7:c7:74:3f:70:6d:9a:f8:38:22:13:27:34:86: eb:58:d2:eb:15:72:cc:7b:4f:96:72:08:b1:a2:07: 91:b0:34:a4:89:41:b0:b8:cd:ea:cc:c4:74:ea:0e: 11:b5:d0:1e:83:68:a6:8d:f7:07:05:ac:97:6c:25: 96:a8:e8:f2:d8:ec:c5:50:7d:55:8b:76:aa:1a:cf: 24:d3:3b:72:c3:db:50:18:17:85:d4:63:b9:1d:3c: 2d:9a:a2:34:a4:d3:e9:3c:4d:0d:33:fb:d7:39:16: 78:e4:fa:3b:c2:a4:b1:c4:b1:49:b4:99:a0:62:b4: 89:39:c4:db:10:20:9f:31:c3:c7:8c:df:18:a1:dc: 26:8b:37:d3:e6:59:9d:65:61:e2:58:b7:96:65:71: 08:68:62:72:09:8a:18:5b:9f:fe:5c:d8:c0:ed:40: c7:49:ea:05:ee:ad:ff:17:13:98:c1:9b:42:e9:a0: f1:a2:fa:e1:ae:b6:e6:09:a8:99:fa:a2:31:ec:cc: 56:7f:c6:0e:51:f5:9d:0f:35:19:88:78:c1:58:04: a7:f6:4d:fc:18:04:e4:4e:e2:37:62:f4:3e:65:10: a0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:6B:B4:ED:DC:C3:1D:B4:7C:BF:19:92:CA:C2:C3:29:DA:0F:34:8F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/bd18dcaf-26ef-4c91-82f0-5ddefc58980c/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/bd18dcaf-26ef-4c91-82f0-5ddefc58980c/0/4A6BB4EDDCC31DB47CBF1992CAC2C329DA0F348F.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.98.192.0/23 IPv6: 2001:df7:c540::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 155059 Signature Algorithm: sha256WithRSAEncryption 54:d7:df:42:76:53:f4:7f:b6:d8:c8:80:b2:5a:c8:e7:cf:5b: c8:af:91:94:fe:5c:2e:df:f7:0c:7a:17:54:9c:a3:58:84:3a: f2:93:b3:db:97:f2:ac:bd:af:03:8c:e9:68:ab:37:cb:ab:cf: ff:dd:ca:3e:6d:69:a2:16:ac:19:96:d5:ec:6a:69:97:e2:74: ee:5f:55:f6:01:ea:7d:2e:5c:71:38:a5:ea:aa:ce:c0:2f:e9: 55:ea:99:ed:d8:95:20:09:30:36:36:16:54:89:f6:6e:d9:61: 05:88:e5:44:28:2a:42:71:49:0e:77:03:93:d4:76:91:d3:d1: cc:8e:31:b5:13:88:1d:10:83:e5:9e:75:7b:0c:8c:58:4d:8b: 05:c3:a6:74:b2:ab:cf:e0:11:bc:e3:44:42:80:cf:d7:c3:0e: 3d:90:78:d2:cb:7b:86:1c:39:a3:13:85:e1:3a:0b:4b:b9:82: ad:39:7a:a9:6d:25:88:60:b8:83:b0:d5:02:ef:7f:46:20:e7: 53:ba:d0:2a:af:26:b0:5b:e4:dc:67:cf:51:77:92:1f:2c:dc: 0e:3d:f4:89:21:99:9e:4c:a0:ce:2a:18:5a:74:22:ec:e1:1b: c6:35:27:9a:33:2b:0a:cb:0e:3a:e2:b3:20:62:f7:a8:34:39: 6a:00:19:cb -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUM9aP7uCPvWzWSdi0t3YciD/kqFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyOTA4MDIzMFoX DTI3MTAyODA4MDczMFowMzExMC8GA1UEAxMoNEE2QkI0RUREQ0MzMURCNDdDQkYx OTkyQ0FDMkMzMjlEQTBGMzQ4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHWlD7cIbY1tbpGRFQZ13EkCk/OCi7nM69Ed6aEx+fHdD9wbZr4OCITJzSG 61jS6xVyzHtPlnIIsaIHkbA0pIlBsLjN6szEdOoOEbXQHoNopo33BwWsl2wllqjo 8tjsxVB9VYt2qhrPJNM7csPbUBgXhdRjuR08LZqiNKTT6TxNDTP71zkWeOT6O8Kk scSxSbSZoGK0iTnE2xAgnzHDx4zfGKHcJos30+ZZnWVh4li3lmVxCGhicgmKGFuf /lzYwO1Ax0nqBe6t/xcTmMGbQumg8aL64a625gmomfqiMezMVn/GDlH1nQ81GYh4 wVgEp/ZN/BgE5E7iN2L0PmUQoCECAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEprtO3cwx20fL8ZksrCwynaDzSPMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2JkMThkY2FmLTI2ZWYtNGM5MS04MmYwLTVkZGVmYzU4OTgwYy8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iZDE4ZGNh Zi0yNmVmLTRjOTEtODJmMC01ZGRlZmM1ODk4MGMvMC80QTZCQjRFRERDQzMxREI0 N0NCRjE5OTJDQUMyQzMyOURBMEYzNDhGLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBG2LAMA8EAgACMAkDBwAgAQ33xUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Al2zMA0GCSqGSIb3DQEBCwUAA4IBAQBU199CdlP0f7bYyICyWsjnz1vIr5GU/lwu 3/cMehdUnKNYhDryk7Pbl/Ksva8DjOloqzfLq8//3co+bWmiFqwZltXsammX4nTu X1X2Aep9LlxxOKXqqs7AL+lV6pnt2JUgCTA2NhZUifZu2WEFiOVEKCpCcUkOdwOT 1HaR09HMjjG1E4gdEIPlnnV7DIxYTYsFw6Z0sqvP4BG840RCgM/Xww49kHjSy3uG HDmjE4XhOgtLuYKtOXqpbSWIYLiDsNUC739GIOdTutAqryawW+TcZ89Rd5IfLNwO PfSJIZmeTKDOKhhadCLs4RvGNSeaMysKyw464rMgYveoNDlqABnL -----END CERTIFICATE-----Generated at Mon Nov 9 17:11:37 2026 by rpki-client